You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@commons.apache.org by gg...@apache.org on 2026/08/28 21:55:04 UTC

(commons-xml) 30/36: Javadoc: Use "secure" terminology.

This is an automated email from the ASF dual-hosted git repository.

garydgregory pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/commons-xml.git

commit c996773278df8ec02f45a95f4d9dfb8478d10d91
Author: Gary Gregory <ga...@gmail.com>
AuthorDate: Fri Aug 28 17:53:52 2026 -0400

    Javadoc: Use "secure" terminology.
---
 .../java/org/apache/commons/xml/SecureTransformerFactory.java     | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/src/main/java/org/apache/commons/xml/SecureTransformerFactory.java b/src/main/java/org/apache/commons/xml/SecureTransformerFactory.java
index dcf12ed..f6db179 100644
--- a/src/main/java/org/apache/commons/xml/SecureTransformerFactory.java
+++ b/src/main/java/org/apache/commons/xml/SecureTransformerFactory.java
@@ -68,7 +68,7 @@
  * {@code newXMLFilter(..)}), if reachable by casting the returned factory, produce objects carrying the same guarantees.
  * </p>
  * <p>
- * Not a {@link TransformerFactory} itself, so none of the JAXP static factory methods is inherited: a caller cannot reach a non-hardened factory through this class
+ * Not a {@link TransformerFactory} itself, so none of the JAXP static factory methods is inherited: a caller cannot reach a non-secured factory through this class
  * by calling an inherited method such as {@code newDefaultInstance()}. The secure factories are instances of a nested, non-public wrapper class.
  * </p>
  *
@@ -82,7 +82,7 @@ public final class SecureTransformerFactory {
      *
      * <p>Used by providers whose underlying TrAX implementation pulls a new {@code SAXParserFactory.newInstance()} for any Source that is not already a
      * {@link SAXSource} carrying its own {@link XMLReader}, and only sets {@link javax.xml.XMLConstants#FEATURE_SECURE_PROCESSING FSP} on the resulting reader.
-     * Wrapping the factory and rewriting the Source upstream guarantees the parse runs through an {@link org.apache.commons.xml}-hardened reader instead.</p>
+     * Wrapping the factory and rewriting the Source upstream guarantees the parse runs through an {@link org.apache.commons.xml}-secured reader instead.</p>
      *
      * <p>Three layers cooperate:</p>
      * <ol>
@@ -96,7 +96,7 @@ public final class SecureTransformerFactory {
      * <p>The {@link SAXTransformerFactory} extension products ride the same wrappers: {@code newTransformerHandler}/{@code newTemplatesHandler} products are
      * wrapped ({@link SecureTransformerHandler}, {@link SecureTemplatesHandler}) so the {@link Transformer}/{@link Templates} they expose carry the resolver
      * floor, and {@code newXMLFilter} returns a {@link SecureXMLFilter} composed from these wrappers instead of the implementation's filter, which would
-     * self-provision an unhardened input reader.</p>
+     * self-provision an unsecured input reader.</p>
      *
      * <h2>Caveats</h2>
      * <ul>
@@ -424,7 +424,7 @@ public static TransformerFactory newInstance(final String factoryClassName, fina
      *         routed through the floor rather than replacing it, so a caller can opt a specific URI in but cannot reopen the fetch.</li>
      *     <li><strong>The nested wrapper</strong>: required. Both implementations fall back to {@code SAXParserFactory.newInstance()} to parse a
      *         stylesheet or source document that does not carry its own reader, and only set FSP on it; wrapping the factory rewrites every {@link Source} through an
-     *         {@link org.apache.commons.xml}-hardened reader instead.</li>
+     *         {@link org.apache.commons.xml}-secured reader instead.</li>
      * </ul>
      *
      * @param factory the factory to secure; never {@code null}.